ios - VPN配置连接失败，求解！

Question

我用的是IKEv2的协议，用的共享密匙的方法，就是最后安装配置文件的之后会打印“error in __connection_block_invoke_2: Connection interrupted”，求大神搭救！

    self.vpnManager = [NEVPNManager sharedManager];
    [_vpnManager loadFromPreferencesWithCompletionHandler:^(NSError * _Nullable error) {
        if (error) {
            NSLog(@"Load config failed [%@]", error.localizedDescription);
            return ;
        }
        // config IPSec protocol
        NEVPNProtocolIKEv2 *p = _vpnManager.protocol;
        if (p) {
            
        }else{
            p = [[NEVPNProtocolIKEv2 alloc]init];
        }
        
        p.username = @"qlvpn";
        p.serverAddress = @"服务器地址";
        
        // get password persistent reference from keychain
        
         
        p.passwordReference = [self searchKeychainCopyMatching:@"kd2014@"];
        // If password doesn't exist in keychain, should create it beforehand.
        if (!p.passwordReference) {
            [self createKeychainValue:@"kd2014@" forIdentifier:@"kd2014@"];
             p.passwordReference = [self searchKeychainCopyMatching:@"kd2014@"];
        }
        p.authenticationMethod = NEVPNIKEAuthenticationMethodSharedSecret;
        p.sharedSecretReference = [self searchKeychainCopyMatching:@"PSK"];
        if (!p.sharedSecretReference) {
            [self createKeychainValue:@"qlvpn_kd2014@" forIdentifier:@"PSK"];
            p.sharedSecretReference = [self searchKeychainCopyMatching:@"PSK"];
        }
//        p.serverCertificateIssuerCommonName
        //倒入p12证书
//        p.identityData = [NSData dataWithContentsOfFile:[[NSBundle mainBundle] pathForResource:@"client.cert" ofType:@"p12"]];
        //倒入p12密码
//        p.identityDataPassword = @"kd2014@";

        p.localIdentifier = @"qlvpn.client";
        p.remoteIdentifier = @"qlvpn.server";
        
        p.useExtendedAuthentication = YES;
        p.disconnectOnSleep = NO;
//        [_vpnManager setOnDemandEnabled:p];
        //z和
         _vpnManager.localizedDescription = @"IKEv2 Demo";
        _vpnManager.protocol = p;
       
        [_vpnManager saveToPreferencesWithCompletionHandler:^(NSError * _Nullable error) {
            NSLog(@"Save config faild[%@]",error.localizedDescription);
        }];
    }];

下面是存密匙的方法：

static NSString * const serviceName = @"qlvpn.vpn_config";

• (NSMutableDictionary )newSearchDictionary:(NSString )identifier {

     NSMutableDictionary *searchDictionary = [[NSMutableDictionary alloc] init];
     
     [searchDictionary setObject:(__bridge id)kSecClassGenericPassword forKey:(__bridge id)kSecClass];
     
     NSData *encodedIdentifier = [identifier dataUsingEncoding:NSUTF8StringEncoding];
     [searchDictionary setObject:encodedIdentifier forKey:(__bridge id)kSecAttrGeneric];
     [searchDictionary setObject:encodedIdentifier forKey:(__bridge id)kSecAttrAccount];
     [searchDictionary setObject:serviceName forKey:(__bridge id)kSecAttrService];
     
     return searchDictionary;

  }

• (NSData )searchKeychainCopyMatching:(NSString )identifier {

     NSMutableDictionary *searchDictionary = [self newSearchDictionary:identifier];
     
     // Add search attributes
     [searchDictionary setObject:(__bridge id)kSecMatchLimitOne forKey:(__bridge id)kSecMatchLimit];
     
     // Add search return types
     // Must be persistent ref !!!!
     [searchDictionary setObject:@YES forKey:(__bridge id)kSecReturnPersistentRef];
     
     CFTypeRef result = NULL;
     SecItemCopyMatching((__bridge CFDictionaryRef)searchDictionary, &result);
     
     return (__bridge_transfer NSData *)result;

  }

• (BOOL)createKeychainValue:(NSString )password forIdentifier:(NSString )identifier {

     NSMutableDictionary *dictionary = [self newSearchDictionary:identifier];
     
     OSStatus status = SecItemDelete((__bridge CFDictionaryRef)dictionary);
     
     NSData *passwordData = [password dataUsingEncoding:NSUTF8StringEncoding];
     [dictionary setObject:passwordData forKey:(__bridge id)kSecValueData];
     
     status = SecItemAdd((__bridge CFDictionaryRef)dictionary, NULL);
     
     if (status == errSecSuccess) {
         return YES;
     }
     return NO;

  }

最后总是返回error in __connection_block_invoke_2: Connection interrupted。。。感觉整个人都不对了。。。